Write-Output "ERROR: Could find *.cer in $JavaCertificateFolder" $certificates=Get-ChildItem -Path $JavaCertificateFolder -Filter *.cer -ErrorAction Stop Write-Output "Check for $JavaCertificateFolder" $log = "$env:LOCALAPPDATA\Temp\W10_JavaKeystoreImport.log" $JavaCertificateFolder = "\\customer.local\share\Java\" The script will always write a log to the path and name you’ve entered.
With that information the script can locate the keytool.exe and your cacerts store. $JRE_HOME – Defines the Java home path.The script will automatically import all certificates stored in the share. $JavaCertificateFolder – Defines a share that is hosting all root certificates ending by.This script needs the following variables to be declared: Feel free to use it in your own environment. I’ve used the following script a lot of times with the help of group policies. If we are talking about enterprise a solution is to call a script checking a certificate folder on a network share everytime a computer gets restarted. Official keytool documentation: Solution: When using the following script your certificates will automatically be deployed after restart when using group policies. This is the only way to ensure that private root certitificates are always up to date.įor updating public root certificates don’t use the keytool.exe. To get this command running without any user interaction I suggest to run it as a PowerShell script in system context during client login.
If you have installed the JRE with default settings the standard keystore is always called “cacerts” and always protected by the password “changeit”. The following command will import the certificate “C:\certificate.cer” to the keystore “cacerts” that is protected by the password “changeit”. This is only possible by using keytool.exe that is located in every standard JRE installation C:\Program Files (x86)\Java\jre1.8.0_144\bin\keytool.exe You can import certificates as user certificates by the graphical user interface but you are not allowed to add any system certificates.
0 kommentar(er)
